Adam Frankel
General Counsel · Technology & AI
15+ years as General Counsel to technology, cloud & AI companies
Free Data Breaches & Incident Management Templates
Data Breaches & Incident Management: 15 free templates to browse without an account, then edit with an AI agent and e-sign in GitLaw.
These documents address internal data handling and external responses to security events. The collection includes a Data breach notification policy for UK GDPR compliance and an RFC 2350 CSIRT description for security incident response teams. General privacy requirements are handled here, but specific employment-related data handling should be sought in Human Resources.
- 15 templates
- Free to edit with AI
- No account needed to browse
15 Data Breaches & Incident Management contracts
Community library
Everything else in this category, uploaded by the GitLaw community. Read any of it free - check it fits your situation before you rely on it.
England & Wales
Data Breach Notification Policy
This internal policy outlines how an organisation identifies, investigates, and reports personal data breaches to the Information Commissioner's Office (ICO). It establishes a 72-hour reporting window for high-risk incidents and mandates the maintenance of a comprehensive Data Breach Register for all security events.
Updated 13 Aug 2026
Denmark
Privacy Policy (Denmark) by Seedsummit
This internal data protection policy establishes how a company manages personal information in compliance with the EU General Data Protection Regulation. It defines processing principles such as data minimization and storage limitation, and outlines the responsibilities of a designated IT systems administrator in Denmark.
Updated 13 Aug 2026
Privacy Policy (UK) by Seedsummit
This privacy policy outlines how a UK-based business handles personal data for account creation, news updates, and website usage. It details the rights of individuals to access, correct, or erase their data in accordance with UK and EU data protection standards.
Updated 13 Aug 2026
US
Security Policies Github Sirt Description Rfc 2350 (GitHub)
This document provides a standardized description of a Computer Security Incident Response Team (CSIRT) following the RFC 2350 protocol. It details contact methods, the team's mission and authority, and specific procedures for handling security incidents.
Updated 13 Aug 2026
Security Policies Coordinated Disclosure Of Security Vulnerabilities (GitHub)
This document outlines GitHub's policy for the coordinated disclosure of security vulnerabilities. It encourages security researchers to report any discovered vulnerabilities to GitHub to help maintain platform safety. The document also introduces GitHub's bug bounty program, which rewards researchers for their efforts in identifying and reporting bugs.
Updated 17 Oct 2025
Security Response by Basecamp
This document outlines a company's approach to security, detailing how customer data is protected and how security concerns are handled. It provides clear channels for customers to report account attacks and for security researchers to disclose vulnerabilities through a bug bounty program. The company commits to investigating and resolving issues, ensuring proper credit for discoveries.
Updated 17 Oct 2025
European Union
Data Protection Policy - Free Template for your Businesses
This Data Protection Policy outlines a company's commitment to safeguarding personal data and respecting individual privacy rights. It details how the company collects, processes, stores, and manages personal data in compliance with various data protection laws and regulations. The policy also defines responsibilities for employees, contractors, and the Data Protection Officer, and covers data subject rights and breach response procedures.
Updated 17 Oct 2025
European Union
Privacy Policy - free legal template
This Privacy Policy template outlines how a company collects, uses, and shares personal information from its users through its website and services. It details various data collection methods, including direct input and automatic tracking via cookies, and explains the legal bases for processing data. The policy also covers user rights, particularly those under GDPR, international data transfers, and security measures.
Updated 17 Oct 2025
12. Content Removal Policies - GitHub Private Information Removal Policy
This document outlines GitHub's policy and process for requesting the removal of private information from repositories. It defines what constitutes "private information" for removal purposes, such as access credentials or sensitive organizational data, and details the steps a complainant must follow to submit a valid removal request. The policy also clarifies what types of content are not appropriate for this specific removal process.
Updated 17 Oct 2025
European Union
Privacy Policy (Denmark) by Seedsummit
This document outlines a company's policy on personal data protection, detailing how personal data is collected, processed, stored, and secured. It emphasizes compliance with the EU General Data Protection Regulation (GDPR) and sets forth principles for data handling, employee obligations, and procedures for data breaches and inquiries. The policy also addresses the use of data processors and international data transfers.
Updated 17 Oct 2025
Frequently asked questions
A template isn't binding on its own - like any contract, it becomes binding once it's properly completed and signed. Templates in our curated library are professionally drafted for US or UK law; review any template before you sign it.
Yes. Chat with GitLaw to edit any section, or make changes directly in the editor.
Yes, read about team plans here.
Describe what you need in the chat and GitLaw will draft it for you.
Templates in our curated library are professionally drafted for US or UK law. The wider library comes from the GitLaw community and public sources - a solid starting point, but check any template fits your situation before you rely on it.
Mostly US and UK law. Some templates use general commercial terms that work across jurisdictions, and many note which law they're written for.
It depends on the situation. Templates work well for routine business agreements. For anything involving significant money, complex IP, employment, or areas you're unsure about, it's worth getting professional advice before you sign. GitLaw provides templates and tools, not legal advice.
Open any template in GitLaw and describe the change you want in the chat — 'make clause 4 mutual' or 'add a 30-day notice period', for example. GitLaw drafts the revised language and shows it as a suggested edit. You accept, reject, or keep editing from there.
Yes. Upload a Word, PDF, or Markdown file and GitLaw will open it in the editor. You can review, edit, or chat with GitLaw about it the same way you would with any template from the library.
Trusted by 5,000+ businesses
From template to signed, in one place
Every template opens in an editor with an AI agent alongside it.
1
Open
Pick a template and open it. Nothing to download, and no credit card to start.
Free to open
2
Edit with AI
Describe your situation in chat and the agent adapts the wording, clause by clause.
Tracked changes you can review
3
Send and sign
Share it for negotiation, then collect signatures without leaving GitLaw.
eSign included
Built for your legal work,
with practicing lawyers
Trained on 5,500+ clauses and specialist areas of law. Built with a standards committee of independent lawyers.
Adam Frankel
General Counsel · Technology & AI
15+ years as General Counsel to technology, cloud & AI companies
Juliana Calil
Principal Counsel · Technology & Entertainment
20+ years in-house at Google, Intel, Disney and Looker
Adam Wardel
General Counsel, Data Privacy Officer & AI Advisor
12+ years leading legal & privacy for SaaS and AI companies
John Hoffman
Associate Director, Corporate Counsel · Life Sciences & Technology
20+ years in corporate counsel, incl. senior counsel at Certara
Richard Nohe
General Counsel · Telecom, Cloud & Data Centers
20+ years in-house, regional General Counsel at BT across 30+ countries
Joe Al-Khayat
General Counsel · Technology & High-Growth Companies
Cross-jurisdictional M&A and SaaS contracting across the UK, US & Australia
Joshua Woo
Technology, AI & Privacy Counsel · APAC
Former Goldman Sachs Executive Director for AI, cybersecurity & privacy in APAC
Sahil Verma
International Business & Investment Lawyer
13+ years in business law, investment law & dispute resolution
Matthew Willis
CRO & General Counsel · SaaS
Former President of the ACC's 2,200-attorney Chicago Chapter · JD + Kellogg MBA
Mayowa Ogunrinola
Legal Consultant · Fintech & AI Compliance
Regulatory strategy, AI governance & data protection for fintech and AI
Steven J. Shanker
Partner and Chair of Corporate and Employment Law
25+ years as a corporate & employment attorney in New York
Rebecca Babbage
Legal Counsel · Financial Services, Corporate & Governance
UK-qualified solicitor working in-house with regulated entities in financial services
Ready to get started?
No sales calls, no credit card. Just chat with GitLaw.
GitLaw provides templates and tools, not legal advice. Templates are a starting point, not a substitute for advice on your situation - for anything significant, speak to a qualified lawyer.